042ba463eebf5403058e100707c92c03_JaffaCakes118 | Triage

Sharing

General

Target

042ba463eebf5403058e100707c92c03_JaffaCakes118
Size

525KB
MD5

042ba463eebf5403058e100707c92c03
SHA1

0f00d4a106020314a4eaaab41cfead4f3ad83f3d
SHA256

aa3d28235dd95667ed2480c864887e6b909dc765e46fbf06fd494af4b840fc27
SHA512

d19b9e8d40e53232f2d41d02b336746a590180f2ecdd2f75dc5a988a16e3f936406a540974da60b89f5b2d7c06e8fba3c334e8a74ff37d307b6bee9fb8eb706d
SSDEEP

12288:rVTZ5PlGQX8tuU2R3xtRe5+nB7+AP6r+EFhxgRKe:pFdDX84U2TtR7nlHvtl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042ba463eebf5403058e100707c92c03_JaffaCakes118

Files

042ba463eebf5403058e100707c92c03_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

A
Size: 208KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

C
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

D
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE